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Amendments to the Claims: 

This listing of Claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) A method of communicating data securely within a 
wireless communications network, comprising the steps of: 

receiving a first authentication request at an authentication server from a mobile 
station; 

providing a first key from said authentication server to said mobile station in 
response to said authentication; 

receiving a second authentication request at said authentication server from a 
database server, said second authentication request further including said first key 
provided by said authentication server to said mobile station and a particular data 
identifying a database record to which said mobile station is requesting access; 

determining at said authentication server as to whether said mobile station has 
authority to access said particular database record; and 

in response to said affirmative determination, 

instructing said database server to provide information associated with 
said requested database record to said mobile station wherein said information is 
encrypted; and 

providing by said authentication server to said mobile station with a 
second key enabling said mobile station to decrypt said information received from said 
database server using said second key. 

2. (Original) The method of Claim 1 wherein said step of providing said first key 
to said mobile station further comprises the step of providing a time out period for said 
first key to said mobile station. 

3. (Original) The method of Claim 1 wherein said information stored in said 



Page 2 of 15 



Appl. No. 10/025,586 

Amdt. Dated July 24, 2006 

Reply to Office action of May 24, 2006 

Attorney Docket No. P15049 

EUS/J/P/06-6117 

database server is encrypted using a data access key and said second key is generated 
from said data access key and said first key. 

4. (Original) The method of Claim 1 wherein said step of instructing said 
database server to provide information to said mobile station further comprises the step 
of providing said database server with a third key wherein said third key is used by said 
database server to further encrypt said information. 

5. (Original) The method of Claim 4 wherein said information stored in said 
database server is encrypted using a data access key and wherein said third key is 
generated from said data access key and said first key and said second key is 
generated from said data access key, said first key and said third key. 

6. (Original) The method of Claim 1 further comprising the steps of: 

receiving a third authentication request from said database server requesting 
authorization to update said particular database record by said mobile station; 

determining whether said mobile station has authority to update said database 
record; and 

in response to an affirmative determination, 

instructing said database server to allow said mobile station to update 
information associated with said database record; and 

providing said mobile station with said second key enabling said mobile 
station to encrypt any information to be transmitted over to the database server to be 
updated at said database record. 

7. (Original) The method of Claim 1 wherein said information stored in said 
database record is encrypted using a data access key and said second key provided to 
said mobile station is generated from said data access key and said first key. 

8. (Currently Amended) The method of storing and communicating data 
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securely within a mobile telecommunications network wherein said mobile 
telecommunications network provides wireless service to a wireless device and further 
includes ao authentication server, comprising the steps of: 

storing particular information within a database server wherein said data is stored 
encrypted using a first encryption key; 

receiving a request from said wireless device to access said information within 
said database server; 

in response to said request, transmitting an authentication request from said 
database server to said mobil e authentication server; 

receiving authentication approval from said authentication server regarding said 
wireless device for said requested information wherein said authentication server further 
prov i ding an provides a decryption key to said wireless device; and 

providing said requested information encrypted to said wireless device wherein 
said wireless device decrypts said information using said decryption key provided by 
said authentication server. 

9. (Original) The method of Claim 8 wherein said step of receiving said 
authentication approval from said authentication server further comprises the steps of: 

receiving a second encryption key from said authentication server; 
encrypting said stored information using said second encryption key; and 
providing said encrypted information to said wireless device. 

10. (Original) The method of Claim 8 wherein said step of receiving said request 
from said wireless device to access said information further comprises the step of 
receiving a session key generated by said authentication server from said wireless 
device. 

11. (Original) The method of Claim 10 wherein said step of transmitting said 
request to said authentication server further comprises the step of including said 
session key within said request. 
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12. (Original) The method of Claim 8 further comprising the steps of: 

receiving a second request from said wireless device to store particular 
information within said database server; 

transmitting a second authentication request to said authentication server; 

receiving second authentication approval from said authentication server 
instructing said database server to allow said wireless device to update said database 
server with said requested information; 

receiving said particular information from said wireless device wherein said 
information being encrypted using a particular encryption key; and 

storing said encrypted information within said database server. 

13-18. (Cancelled) 

19. (Currently Amended) A database server for storing and communicating 
data securely with a wireless device associated within a mobile communications 
network, said mobile communications network including an authentication server, 
comprising: 

means for storing particular information within said database server wherein said 
data is stored encrypted using a first encryption key; 

means for receiving a request from said wireless device to access said stored 
information within said database server; 

means for transmitting an authentication request to said mobile authentication 
server in response to said request; 

means for receiving authentication approval from said authentication server 
regarding said wireless device for said requested information wherein said 
authentication server further providing an decryption key to said wireless device; and 

means for providing said requested information encrypted to said wireless device 
wherein said wireless device decrypts said information using said decryption key 
provided by said authentication server. 
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20. (Original) The database server of claim 19 wherein said means for receiving 
said authentication approval from said authentication server further comprises: 

means for receiving a second encryption key from said authentication server: 
means for encrypting said stored information using said second encryption key; 

and 

means for providing said encrypted information to said wireless device. 

21. (Original) The database server of Claim 19 wherein said request from said 
wireless device to access said information further comprises a session key generated 
by said authentication server from said wireless device. 

22. (Original) The database server of Claim 21 wherein said request to said 
authentication server further comprises said session key received from said wireless 
device. 
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